GSNA試験無料問題集（368題）「GIAC Systems and Network Auditor 認定」

出題：1

You work as the Network Administrator for XYZ CORP. The company has a Unix-based network. You want to set the hard disk geometry parameters, cylinders, heads, and sectors. Which of the following Unix commands can you use to accomplish the task?

A. mke2fs

B. mkfs

C. hdparm

D. mkswap

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which of the following wireless security standards supported by Windows Vista provides the highest level of security?

A. WEP

B. WPA-PSK

C. WPA-EAP

D. WPA2

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which of the following records is the first entry in a DNS database file?

A. CNAME

B. SOA

C. SRV

D. MX

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Mark works as a Network Administrator for NetTech Inc. The company has a Windows 2003 Active Directory domain-based network. The domain consists of a domain controller, two Windows 2003 member servers, and one hundred client computers. The company employees use laptops with Windows XP Professional. These laptops are equipped with wireless network cards that are used to connect to access points located in the Marketing department of the company. The company employees log on to the domain by using a user name and password combination. The wireless network has been configured with WEP in addition to 802.1x. Mark wants to provide the best level of security for the kind of authentication used by the company. What will Mark do to accomplish the task?

A. Use MD5

B. Use EAP-TLS

C. Use IPSec

D. Use PEAP

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

The routing algorithm uses certain variables to create a metric of a path. It is the metric that actually determines the routing path. In a metric, which of the following variables is used to define the 'largest size' of a message that can be routed?

A. MTU

B. Bandwidth

C. Hop count

D. Load

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You work as the Project Engineer for XYZ CORP. The company has a Unix-based network. Your office consists of one server, seventy client computers, and one print device. You raise a request for printing a confidential page. After 30 minutes, you find that your print request job is not processed and is at the seventh position in the printer queue. You analyze that it shall take another one hour to print. You decide to remove your job from the printer queue and get your page printed outside the office. Which of the following Unix commands can you use to remove your job from the printer queue?

A. tunelp

B. gs

C. lprm

D. pr

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You work as a professional Ethical Hacker. You are assigned a project to test the security of www.we-are-secure.com. You are working on the Windows Server 2003 operating system. You suspect that your friend has installed the keyghost keylogger onto your computer. Which of the following countermeasures would you employ in such a situation?

A. Use commercially available anti-keyloggers such as PrivacyKeyboard.

B. Remove the SNMP agent or disable the SNMP service.

C. Monitor the programs running on the server to see whether any new process is running on the server or not.

D. Use on-screen keyboards and speech-to-text conversion software which can also be useful against keyloggers, as there are no typing or mouse movements involved.

正解：A,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Patricia joins XYZ CORP., as a Web Developer. While reviewing the company's Web site, she finds that many words including keywords are misspelled. How will this affect the Web site traffic?

A. Link exchange with other sites becomes difficult.

B. Leave a bad impression on users.

C. The domain name cannot be registered.

D. Search engine relevancy may be altered.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Which of the following is a prevention-driven activity to reduce errors in the project and to help the project meet its requirements?

A. Access control

B. Quality assurance

C. Asset management

D. Audit sampling

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

You work as a Database Administrator for XYZ CORP. The company has a multi-platform network. The company requires fast processing of the data in the database of the company so that answers to queries can be generated quickly. To provide fast processing, you have
a conceptual idea of representing the dimensions of data available to a user in the data cube format. Which of the following systems can you use to implement your idea?

A. Federated database system

B. Hierarchical database system

C. SYSDBA

D. MDDBMS

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He notices that UDP port 137 of the We-aresecure server is open. Assuming that the Network Administrator of We-are-secure Inc. has not changed the default port values of the services, which of the following services is running on UDP port 137?

A. TELNET

B. NetBIOS

C. HTTPS

D. HTTP

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

You are tasked with creating an ACL to apply to Fa0/0 based on the following requirements: The ACL must be protocol specific. All traffic from host 10.10.45.2 and subnet 10.10.1.32/27 must be denied access through the router. Telnet and SSH must be denied for ALL hosts except the management host with the IP address of 10.10.0.100. This management host must not only have Telnet and SSH access, but access to any port in the TCP and UDP suite to any destination. HTTP, HTTPS, and DNS requests must be allowed for all hosts on subnets 10.10.2.0/24 and 10.10.3.0/24 to any destination. All remaining traffic must be denied. Cisco IOS applies an implied deny all at the end of an ACL. However, you must provide this configuration manually so that engineers can see hit counts on the deny all traffic when running the show ip access-lists command. Which of the following sets of commands will you choose to complete the configuration on Router A?

A. RouterA(config)#access-list 110 deny ip host 10.10.45.2 any RouterA(config)#access-list 110 deny ip 10.10.1.32 0.0.0.31 any RouterA(config)#access-list 110 permit tcp host 10.10.0.100 any RouterA(config)#access-list 110 permit udp host 10.10.0.100 any RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 80 RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 443 RouterA(config)#access-list 110 permit udp 10.10.2.0 0.0.1.255 any eq 53 RouterA(config)#access-list 110 deny ip any any RouterA(config)#interface fa0/0 RouterA(config-if)#ip access-group 110 out

B. RouterA(config)#access-list 110 deny ip host 10.10.45.2 any RouterA(config)#access-list 110 deny ip 10.10.1.32 0.0.0.31 any RouterA(config)#access-list 110 permit ip host 10.10.0.100 any RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 80 RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 443 RouterA(config)#access-list 110 permit udp 10.10.2.0 0.0.1.255 any eq 53 RouterA(config)#access-list 110 deny ip any any RouterA(config)#interface fa0/0 RouterA(config-if)#ip access-group 110 in

C. RouterA(config)#access-list 99 deny ip host 10.10.45.2 any RouterA(config)#access-list 99 deny ip 10.10.1.32 0.0.0.31 any RouterA(config)#access-list 99 permit tcp host 10.10.0.100 any RouterA(config)#access-list 99 permit udp host 10.10.0.100 any RouterA(config)#access-list 99 permit tcp 10.10.2.0 0.0.1.255 any eq 80 RouterA(config)#access-list 99 permit tcp 10.10.2.0 0.0.1.255 any eq 443 RouterA(config)#access-list 99 permit udp 10.10.2.0 0.0.1.255 any eq 53 RouterA(config)#access-list 99 deny ip any any RouterA(config)#interface fa0/0 RouterA(config-if)#ip access-group 99 in

D. RouterA(config)#access-list 110 deny ip host 10.10.45.2 any RouterA(config)#access-list 110 deny ip 10.10.1.32 0.0.0.31 any RouterA(config)#access-list 110 permit tcp host 10.10.0.100 any RouterA(config)#access-list 110 permit udp host 10.10.0.100 any RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 80 RouterA(config)#access-list 110 permit tcp 10.10.2.0 0.0.1.255 any eq 443 RouterA(config)#access-list 110 permit udp 10.10.2.0 0.0.1.255 any eq 53 RouterA(config)#access-list 110 deny ip any any RouterA(config)#interface fa0/0 RouterA(config-if)#ip access-group 110 in

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?

A. Implement WPA

B. Don't broadcast SSID

C. Implement WEP

D. Implement MAC filtering

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

Which of the following tools is a Windows-based commercial wireless LAN analyzer for IEEE 802.11b and supports all high level protocols such as TCP/IP, NetBEUI, and IPX?

A. John the Ripper

B. Cheops-ng

C. AiroPeek

D. Sam Spade

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

GSNA試験無料問題集「GIAC Systems and Network Auditor 認定」